Amendments to the Claims: 



1. (Original) A method comprising: 

copying a disk image to a hard disk drive on a managed platform, wherein the 
disk image is copied from a model disk image stored on a storage device of a 
remote management system; 

during a user session on the managed platform, monitoring write commands 
from an operating system of the managed platform; 

in response to detecting write commands from the operating system that 
address blocks of the hard disk drive, automatically updating a write log to identify 
the blocks addressed by the write commands; 

after completion of the user session, automatically determining whether one 
or more blocks of the hard disk drive were modified, based at least in part on the 
write log; and 

in response to determining that at least one block in the hard disk drive was 
modified, automatically restoring original contents to the modified block during a boot 
process for the managed platform by oven^^riting the modified block with 
corresponding backup data from the model disk image. 

2. (Original) A method according to claim 1 , wherein the operation of copying a disk 
image to a hard disk drive on a managed platform comprises: 

provisioning the managed platform with software by automatically loading the 
disk image into the managed platform from the remote management system during a 
boot process for the managed platform. 

3. (Original) A method according to claim 1 , wherein the disk image comprises an 
image of a disk partition. 

4. (Original) A method according to claim 1, further comprising: 

terminating the operating system on the managed platform before restoring 
the original contents to the modified block from the remote management system. 



Docket No.: 42P 19574 
Application No.: 10/587,343 



2 



Utility Patent Application 



5. (Original) A method according to claim 4, further comprising: 

launching the operating system on the managed platform after restoring the 
original contents to the modified block from the model disk image. 

6. (Original) A method comprising: 

during a user session on a platform, in response to write commands 
addressing blocks of a storage device in the platform, automatically updating a write 
log to identify the blocks addressed by the write commands; 

after completion of the user session, automatically identifying one or more 
modified blocks in the storage device, based at least in part on the write log; and 

in response to identifying at least one modified block in the storage device, 
automatically replacing data in the modified block with backup data from a different 
storage device. 

7. (Original) A method according to claim 6, further comprising: 

in advance of the user session, provisioning the platform with software by 
copying a disk image to the storage device in the platform from a model disk image 
stored on the different storage device. 

8. (Original) A method according to claim 7, wherein .the operation of copying a disk 
image comprises copying the disk image from a remote data processing system. 

9. (Original) A method according to claim 6, wherein the storage device in the 
platform comprises a hard disk drive. 

10. (Original) A method according to claim 6, wherein the operation of automatically 
replacing data in the modified block with backup data from a different storage device 
comprises: 
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automatically restoring the modified block during a boot process for the 
platform by ovenA/riting the modified block with corresponding backup data from a 
model disk image. 

11. (Original) A method according to claim 6, further comprising: 

terminating an operating system on the platform before replacing the data in 
the modified block with backup data from the different storage device. 

12. (Original) A method according to claim 1 1 , further comprising: 

launching the operating system on the platform after replacing the data in the 
modified block with backup data from the different storage device. 

13. (Currently amended) An apparatus comprising: 

a machine accessible storage medium; and 

instructions encoded in the machine accessible storage medium, wherein the 
instructions, when executed by a processing system, perform operations comprising: 

during a user session on the processing system, in response to write 
commands addressing blocks of a storage device in the processing system, 
automatically updating a write log to identify the blocks addressed by the write 
commands; 

after completion of the user session, automatically identifying one or more 
modified blocks in the storage device, based at least in part on the write log; and 

in response to identifying at least one modified block in the storage device, 
automatically replacing data in the modified block with backup data from a different 
storage device. 

14. (Original) An apparatus according to claim 13, wherein the instructions 
comprise firmware instructions to execute before the processing system boots to an 
operating system. 
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15. (Original) An apparatus according to claim 13, wherein the instructions perform 
further operations comprising: 

in advance of the user session, provisioning the processing system with 
software by copying a disk image to the storage device in the processing system 
from a model disk image stored on the different storage device. 

16. (Original) An apparatus according to claim 15, wherein the instructions cause 
the processing system to copy the disk image from a remote data processing 
system. 

17. (Original) An apparatus according to claim 13, wherein the storage device in 
the processing system comprises a hard disk drive. 

18. (Original) An apparatus according to claim 13, wherein the operation of 
automatically replacing data in the modified block with backup data from a different 
storage device comprises: 

automatically restoring the modified block during a boot process for the 
processing system by overwriting the modified block with corresponding backup data 
from a model disk image. 

19. (Original) An apparatus according to claim 13, wherein the instructions perform 
further operations comprising: 

terminating an operating system on the processing system before replacing 
the data in the modified block with backup data from the different storage device. 

20. (Original) An apparatus according to claim 19, wherein the instructions perform 
further operations comprising: 

launching the operating system on the platform after replacing the data in the 
modified block with backup data from the different storage device. 



Docket No. :42P 19574 
Application No.: 10/587,343 



5 



Utility Patent Application 



21. (Currently amended) A processing system comprising: 

a machine accessible storage medium; 
a storage device; 
a processor; 

one or more communication paths to couple the processor with the machine 
accessible storage medium and the storage device; and 

instructions encoded in the machine accessible storage medium, wherein the 
instructions, when executed by the processor, perform operations comprising: 

during a user session on the processing system, in response to write 
commands addressing blocks of the storage device, automatically updating a write 
log to identify the blocks addressed by the write commands; 

after completion of the user session, automatically identifying one or more 
modified blocks in the storage device, based at least in part on the write log; and 

in response to identifying at least one modified block in the storage device, 
automatically replacing data in the modified block with backup data from a different 
storage device. 

22. (Original) A processing system according to claim 21, wherein the instructions 
comprise firmware instructions to execute before the processing system boots to an 
operating system. 

23. (Original) A processing system according to claim 21, wherein the instructions 
perform further operations comprising: 

in advance of the user session, provisioning the processing system with 
software by copying a disk image to the storage device in the processing system 
from a model disk image stored on the different storage device. 

24. (Original) A processing system according to claim 23, wherein the instructions 
cause the processing system to copy the disk image from a remote data processing 
system. 
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25. (Original) A processing system according to claim 24, further comprising the 
remote data processing system. 

26. (Original) A processing system according to claim 21, wherein the storage 
device in the processing system comprises a hard disk drive. 

27. (Original) A processing system according to claim 21, wherein the operation of 
automatically replacing data in the modified block with backup data from a different 
storage device comprises: 

automatically restoring the modified block during a boot process for the 
processing system by overwriting the modified block with corresponding backup data 
from a model disk image. 

28. (Original) A processing system according to claim 21, wherein the instructions 
perform further operations comprising: 

terminating an operating system on the processing system before replacing 
the data in the modified block with backup data from the different storage device. 

29. (Original) A processing system according to claim 28, wherein the instructions 
perform further operations comprising: 

launching the operating system on the platform after replacing the data in the 
modified block with backup data from the different storage device. 
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